Specifying An Authentication Domain For Mac Authentication Users - HP 5120 EI Switch Series Configuration Manual

Hide thumbs Also See for 5120 EI Switch Series:
Table of Contents

Advertisement

To do...
Enable MAC authentication
globally
Configure MAC
authentication timers
Configure the properties of
MAC authentication user
accounts
Configuring MAC authentication on a port
Follow these steps to configure MAC authentication on a port:
To do...
Enter system view
Enable MAC
authentication for
specified ports
Set the maximum number of concurrent MAC
authentication users allowed on a port
NOTE:
You cannot enable MAC authentication on a link aggregation member port. If MAC authentication is
enabled on a port, you cannot assign it to a link aggregation.
Specifying an authentication domain for MAC
authentication users
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users:
Specify a global authentication domain in system view. This domain setting applies to all ports.
Specify an authentication domain for an individual port in interface view.
Use the command...
mac-authentication
mac-authentication timer { offline-
detect offline-detect-value | quiet quiet-
value | server-timeout server-timeout-
value }
mac-authentication user-name-format
{ fixed [ account name ] [ password {
cipher | simple } password ] | mac-
address [ { with-hyphen | without-
hyphen } [ lowercase | uppercase ] ] }
Use the command...
system-view
mac-authentication interface
In system view
interface-list
interface interface-type
In Layer 2 Ethernet
interface-number
interface view
mac-authentication
mac-authentication max-user
user-number
99
Remarks
Required
Disabled by default
Optional
By default, the offline detect timer
is 300 seconds, the quiet timer is
60 seconds, and the server
timeout timer is 100 seconds.
Optional
By default, the username and
password for a MAC
authentication user account must
be a MAC address in lower case,
and the MAC address is hyphen
separated.
Remarks
Required
Use either approach.
Disabled by default
Optional
256 by default

Advertisement

Table of Contents
loading

Table of Contents